CVE-2024-26753

    Dashboard / Vulnerabilities / CVE-2024-26753

    CVE-2024-26753

    Published: 3 Apr 2024Last Modified: 12 Aug 2026

    Summary: crypto: virtio/akcipher - Fix stack overflow on memcpy

    Details: In the Linux kernel, the following vulnerability has been resolved: crypto: virtio/akcipher - Fix stack overflow on memcpy sizeof(struct virtio_crypto_akcipher_session_para) is less than sizeof(struct virtio_crypto_op_ctrl_req::u), copying more bytes from stack variable leads stack overflow. Clang reports this issue by commands: make -j CC=clang-14 mrproper >/dev/null 2>&1 make -j O=/tmp/crypto-build CC=clang-14 allmodconfig >/dev/null 2>&1 make -j O=/tmp/crypto-build W=1 CC=clang-14 drivers/crypto/virtio/ virtio_crypto_akcipher_algs.o

    References: https://git.kernel.org/stable/c/37077ed16c7793e21b005979d33f8a61565b7e86, https://git.kernel.org/stable/c/62f361bfea60c6afc3df09c1ad4152e6507f6f47, https://git.kernel.org/stable/c/b0365460e945e1117b47cf7329d86de752daff63, https://git.kernel.org/stable/c/c0ec2a712daf133d9996a8a1b7ee2d4996080363, https://git.kernel.org/stable/c/ef1e47d50324e232d2da484fe55a54274eeb9bc1, https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html, https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26753.json, https://nvd.nist.gov/vuln/detail/CVE-2024-26753, https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 1ff57428894fc4f5001d3df0762c1820295d6c4f
    Fixed -37077ed16c7793e21b005979d33f8a61565b7e86

    Affected versions

    v5.10.211
    v5.10.210
    v5.10.209

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2024-26753 | CVE-DB